In which scenario is a preshared key commonly used?

When non-repudiation is required.

Small-scale or point-to-point IPsec VPNs.

Public websites requiring certificate-based authentication.

Large-scale enterprise networks with many users.

A software vendor distributes firmware updates to customers. The vendor wants customers to be able to verify that the firmware has not been altered during download. Which cryptographic component should the vendor use to provide this assurance?

Publish a cryptographic hash of the firmware file alongside the download.

Encrypt the firmware file with a symmetric key shared with all customers.

Use a digital signature, but only if the customers have the vendor's private key.

Compress the firmware file and provide a checksum.

Why is post-quantum cryptography important for future security?

To replace all symmetric encryption.

To protect data from future quantum computer attacks.

To eliminate the need for certificates.

To speed up encryption processes.

A network administrator wants to allow remote users to access internal web services through a corporate proxy without exposing the internal network. The solution must support multiple concurrent connections and be resilient to network changes. Which technology should the administrator choose?

IPsec in tunnel mode with a static IP address for the proxy.

A traditional TLS VPN that uses a single TCP connection.

SSH port forwarding through the proxy.

MASQUE, which uses QUIC to create secure, multiplexed tunnels through the proxy.

What security services does IPsec provide?

Only integrity and authentication.

Confidentiality, integrity, and authentication.

CiscoCertified Network Professional Security

Domain 1Objective 5

1.5 Describe Cryptography Security Components Such as Hashing, Encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, Preshared Key, Certificate-Based Authorization, and Post-Quantum Cryptography 350-701 Practice Questions (Page 2)

Part of the Security Concepts domain, which accounts for 20% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

12concepts

20%of the exam

Questions 6–10

6foundation · easy
In which scenario is a preshared key commonly used?
Select an answer first
7application · medium
A software vendor distributes firmware updates to customers. The vendor wants customers to be able to verify that the firmware has not been altered during download. Which cryptographic component should the vendor use to provide this assurance?
Select an answer first
8foundation · easy
Why is post-quantum cryptography important for future security?
Select an answer first
9application · medium
A network administrator wants to allow remote users to access internal web services through a corporate proxy without exposing the internal network. The solution must support multiple concurrent connections and be resilient to network changes. Which technology should the administrator choose?
Select an answer first
10foundation · easy
What security services does IPsec provide?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.